You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by ru...@apache.org on 2026/07/02 17:34:50 UTC
(superset) branch chore/ci-codeql-action-version-pin created (now 3d1c08976c9)
This is an automated email from the ASF dual-hosted git repository.
rusackas pushed a change to branch chore/ci-codeql-action-version-pin
in repository https://gitbox.apache.org/repos/asf/superset.git
at 3d1c08976c9 chore(ci): correct codeql-action version pin comment to v4.36.2
This branch includes the following new commits:
new 3d1c08976c9 chore(ci): correct codeql-action version pin comment to v4.36.2
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(superset) 01/01: chore(ci): correct codeql-action version pin comment to v4.36.2
Posted by ru...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
rusackas pushed a commit to branch chore/ci-codeql-action-version-pin
in repository https://gitbox.apache.org/repos/asf/superset.git
commit 3d1c08976c9d838ef7194b3d83432e3576852a5b
Author: Evan <ev...@preset.io>
AuthorDate: Thu Jul 2 10:34:25 2026 -0700
chore(ci): correct codeql-action version pin comment to v4.36.2
The pinned SHA 8aad20d150bbac5944a9f9d289da16a4b0d87c1e resolves to
release v4.36.2, but the trailing comment claimed the generic "v4"
major tag. zizmor's ref-version-mismatch flags this because the
comment must truthfully name the version the SHA points to, matching
the full-patch-version convention used for every other pinned action
in this repo (e.g. actions/checkout # v7.0.0).
Resolves code-scanning alert #2561
Co-Authored-By: Claude Opus 4.8 <no...@anthropic.com>
---
.github/workflows/codeql-analysis.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 8fd50f4278a..3899a8582e8 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -64,7 +64,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+ uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -75,6 +75,6 @@ jobs:
# queries: security-extended,security-and-quality
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+ uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
with:
category: "/language:${{matrix.language}}"